EOSERV Forum > Announcements > EO Server Backdoor Warnings
Topic is locked.
Page: << 1 2 ... 7 8 9 10 11 ... 14 15 >>
EO Server Backdoor Warnings
Author Message
Post #121780 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it. I don't know how sausage figured the codesbuti'llbehappy to let him re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it. I thought this was added in my own serverbutthat's not the case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.



I don't believe this bullshit for a second. You think this has nothing to do with Elevations yet there IS a post on eoserv.net/forums with Elevations confessing that he coded the majority of eosource? Coincidental the user commands to access passwords are #elevations and #hollow? Password recovery yet the player had to be logged in? Debug/Testing yet the command was not restricted to admin or even hgm? Listen dude, Elefag has friends that really don't give a shit to rat him out. Do I believe them? Yes, they have always let me know when Elevations is planning use of an exploit(like that one you said would crash EE and BU that wouldn't crash EOSource, easy fix btw). Why would his friends make up something like this having never seen EOSource's source code and it just so happens that they are right? Coincidence? Accident? Sorry, that is total bullshit. 

I wouldn't use anything from that site ever again. There are far better programmers at eoserv.net and are more than willing to provide an open source distribution to prove their code is free from login leeching faggotry. You think they removed the shit? I wouldn't doubt if they don't cram it into their own personal SLN to leech passwords across all servers at some point. I should also note that there is nothing in EOSource that hasn't already been released here within these forums in some form if it doesn't already exist in EOSERV, in other words... you don't need their shit because it all came from here. No one is buying this attempt to cover up the true purpose of those commands.

12 years, 51 weeks ago
Post #121781 Re: Warning: Do not use EOSource or Seose

By saying that ele had nothing to do with this i meant that he did not add or know anything of the #user command which was implanted in EOSource. Yes he did code quite a bit in EOSource but almost always on my teamviewer. As sausage posted on the home page the backdoors seem to be open exceptthe sausage fag message which isn't added in the new uploaded EOSource. Ele is indeed involved of the creation EOSource but not of that password recovery command.

And just because you don't like EOSource or trust it or whatever there's no reason to say that we just simply copy n pasted everything if that's what you mean. Pets, fishing, mining. Yes they were released on the forum before. But alot of codes were made by ourself. Sausage, exile may scan EOSource often, also i can understand it if people don't trust it. But just know that i don't have any bad intentions with EOSource. Also like the most people think i did not create my own forum to bother sausage and steal their users. If i wanted to i could as well just have made EOSource connect to my own SLN instead to both. Just because we have our own website, and because of this #user issue it doesn't mean EOSource can't be trusted anymore. I could as well say stuff like that bart/kenobi13 tried to crash BU, that sausage stole and uploaded FE's source. But i have always kept quiet about such things because i didn't feel like there was a need for making you black. Still because this little accident you simply want people to stop trusting EOSource and hate elevations. It's just like brainwashing. I created a forum to help people and not mind fuck them.

12 years, 51 weeks ago
Post #121783 Re: Warning: Do not use EOSource or Seose

Okay. So one of the backdoors removed. Who knows what else is hidden in EOSource? I wouldn't use any kind of software that has been written using your keyboards. I won't change my mind until you open the source.

12 years, 51 weeks ago
Post #121784 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 05:53 pm)

By saying that ele had nothing to do with this i meant that he did not add or know anything of the #user command which was implanted in EOSource. Yes he did code quite a bit in EOSource but almost always on my teamviewer. As sausage posted on the home page the backdoors seem to be open exceptthesausage fag message which isn't added in the new uploaded EOSource. Ele is indeed involved of the creation EOSource but not of that password recovery command.


So what ele said on eosource chat box is false?? He admited he knew about it an it was in there for your old server he just figured you took it out, but now all of a sudden he had no  knowledge  about it? 

I call bullshit.. I smell elephant shit.. I see some twisted double talk happening.. Hollow you keep making excuses, I think you've been around ele to long.
---
http://www.ctronic.ga
http://www.tsu.co/Deltro
https://www.reverbnation.com/deltro9
12 years, 51 weeks ago
Post #121785 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it. I don't know howsausagefiguredthecodesbuti'llbehappytolet him re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it. I thought this wasaddedinmyownserverbutthat'snot the case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevations is obsessed with grabbing ateveryone'spasswordssohecantry use their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't know any other ways of doingthisatm.Unlessaddinganew database column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest of the world does is useanalternativewaytoverify the user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords still without ever needing to knowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant to be there especially the Sausage, exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.
---
¨°º¤ø„º°¨ Exile Studios ¨°º„ø¤º°¨
12 years, 51 weeks ago
Post #121786 Re: Warning: Do not use EOSource or Seose
Deathx posted: (9th Jan 2012, 05:55 pm)

Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it. Idon'tknowhowsausagefiguredthecodesbuti'llbehappytolet him re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it. I thoughtthiswasaddedinmyownserverbutthat'snotthe case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevations is obsessedwithgrabbingateveryone'spasswordssohecantry use their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't know any otherwaysofdoingthisatm.Unlessaddinganew database column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest of the worlddoesisuseanalternativewaytoverify the user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords still without everneedingtoknowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant to be there especiallytheSausage,exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.

Well i wasn't even aware of the permanently banned code.

@toolcoolforaname. My ice&fire used to be open source but i stopped giving away the source because people will claim it as their own and steal the codes which i like to share but not open source. Although i gave everyone credits that deserved it such as sausage (of course), apollo, madao,ananas etc. I don't think apollo does have backdoors in vodka, i really doubt it but that is closed source too. So you can trust that even till it's open source? Just because u hear that ''hollow'' created it or that ''whatevername'' created it even if the person did wrong things in the past itdoesn't mean it will have a virus or whatever.

You guys were right about the #user thing but now it's starting to feel like the only thing you want now is making EOSource black and providing of it so more people will use EOSERV. If that's the case it's pretty sad.
12 years, 51 weeks ago
Post #121787 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 06:02 pm)

Deathx posted: (9th Jan 2012, 05:55 pm)

Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it. I don'tknowhowsausagefiguredthecodesbuti'llbehappytolet him re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it. I thoughtthiswasaddedinmyownserverbutthat'snot the case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevations is obsessed withgrabbingateveryone'spasswordssohecantry use their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't know any other waysofdoingthisatm.Unlessaddinganew database column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest of the world doesisuseanalternativewaytoverify the user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords still without ever needingtoknowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant to be there especially theSausage,exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.

Well i wasn't even aware of the permanently banned code.

Not even going to "defend" against my statement huh? 
I wasn't the only one on the chatbox that saw ele admit he knew of the command, but then says "its a forgotten command". 
---
http://www.ctronic.ga
http://www.tsu.co/Deltro
https://www.reverbnation.com/deltro9
12 years, 51 weeks ago
Post #121788 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 06:02 pm)

Deathx posted: (9th Jan 2012, 05:55 pm)

Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' init.Idon'tknowhowsausagefiguredthecodesbuti'llbehappytolethim re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage postedit.Ithoughtthiswasaddedinmyownserverbutthat'snotthe case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevationsisobsessedwithgrabbingateveryone'spasswordssohecantryuse their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't knowanyotherwaysofdoingthisatm.Unlessaddinganewdatabase column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest oftheworlddoesisuseanalternativewaytoverifythe user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords stillwithouteverneedingtoknowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant tobethereespeciallytheSausage,exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.

Well i wasn't even aware of the permanently banned code.

That's hillarious if that's how your cooperation looks like.

"i stopped giving away the source because people will claim it as their own and steal the codes" I fucking lol'd atthis one. Nice irony XD.
12 years, 51 weeks ago
Post #121789 Re: Warning: Do not use EOSource or Seose
kodyt posted: (9th Jan 2012, 06:05 pm)

Hollow posted: (9th Jan 2012, 06:02 pm)

Deathx posted: (9th Jan 2012, 05:55 pm)

Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it. Idon'tknowhowsausagefiguredthecodesbuti'llbehappytolethim re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it. Ithoughtthiswasaddedinmyownserverbutthat'snotthe case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevations is obsessedwithgrabbingateveryone'spasswordssohecantryuse their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't know any otherwaysofdoingthisatm.Unlessaddinganewdatabase column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest of the worlddoesisuseanalternativewaytoverifythe user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords still without everneedingtoknowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant to be thereespeciallytheSausage,exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.

Well i wasn't even aware of the permanently banned code.

Not even going to "defend" against my statement huh? 
I wasn't the only one on the chatbox that saw ele admit he knew of the command, but then says "its a forgotten command". 

What's there to be defended? Maybe he knew of it. I might have said he didn't but i don't watch ele 24/7 either and ask him what he knows and what he doesn't know. Just as i said before it's really starting to feel like the only thing you care about is making EOSource look bad. Just because of thissingle #user thing which IS ALREADY removed your doing all difficult. It's not just the #user anymore but starting to get EOSource down. That's how all act now.

@toolcoolforaname if you'll only act childish don't post? Here is the credits page if you like to see it.
12 years, 51 weeks ago
Post #121790 Re: Warning: Do not use EOSource or Seose

Another lie?

Why the fuck do you need a "player" command not an "admin" command to view passwords?
Why do you say password recovery when the player must be logged in?
Why do you say Elevations had nothing to do with this when on EOSource's forum it clearly states he coded most of EOSource?
Why do you deny knowledge of this when it was tied to users "Elevations" and "Hollow"?
Why would you tie commands to both "Elevations" and "Hollow" if neither of you were involved?

Again, bullshit kid. EOSource isn't more than 6 months old. You know every damn thing that is in the code. No one here is stupid enough to believe this was all just some accident.

#Edit: Hollow if I did open source Vodka which is a year old you could learn how to do simple things like send spike animations without spamming every map/character in the game. You should really fix that bro.

12 years, 51 weeks ago
Post #121791 Re: Warning: Do not use EOSource or Seose

Fine, i might consider making EOSource open source and you'll see if it includes virusses, backdoors or not. Although i must consult this with clive and ele first. Why did i make it closed source? Not to put virusses in it but to keep people away from stealing our codes.

12 years, 51 weeks ago
Post #121792 Re: Warning: Do not use EOSource or Seose

Clive says he has never seen the code. That's really odd.

12 years, 51 weeks ago
Post #121793 Re: Warning: Do not use EOSource or Seose
Apollo posted: (9th Jan 2012, 06:13 pm)

Clive says he has never seen the code. That's really odd.


He never had the source i was mistaken with ice&fire.
12 years, 51 weeks ago
Post #121794 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 06:09 pm)

kodyt posted: (9th Jan 2012, 06:05 pm)

Hollow posted: (9th Jan 2012, 06:02 pm)

Deathx posted: (9th Jan 2012, 05:55 pm)

Hollow posted: (9th Jan 2012, 05:40 pm)

Sausage posted: (9th Jan 2012, 04:50 pm)

Hollow posted: (9th Jan 2012, 04:44 pm)

Sausage posted: (9th Jan 2012, 04:04 pm)

Hollow posted: (9th Jan 2012, 02:27 pm)

This wasn't meant to be there. This has now be removed and has nothing to do with elevations. We did implant this a while ago but was supposed to be removed already. We're truly sorry and have updated to 1.4 which has no ''backdoors'' in it.Idon'tknowhowsausagefiguredthecodesbuti'llbehappytolethim re-do what he did to check if there may be other backdoors. As i said before i'm truly sorry and this will not happen again. If you people stop trusting EOSource i won't blame you just know that this won't happen again.

Even though we shouldn't have done this (Which is now removed) EOSouce isn't the only thing with a backdoor. SEOSE had a backdoor, still we used it for ages. And what could i do with your passwords? The only private server i play is FE. Again.. sorry this shouldn't have been there.

I did implant this to my own server hollowfication used for password recovery since i am using EOSource on my hollowfication server too. And i have never (None of our staff) have ever used it. Infact we didn't know it was there until sausage posted it.Ithoughtthiswasaddedinmyownserverbutthat'snotthe case.

Again.. This has nothing to do with elevations. It was me that implanted the command in eosource not him. Also as i said this was an accident.


That doesn't even make any sense. How is a password recovery feature useful at all if it involves the player being logged in with their username and password? Not to mention any password recovery system based on recovering the user's plaintext password is just plain bad.

The only reason I was even looking at EOSource is because of hearing about someone bragging about the backdoor in it. I'll check out 1.4 and update the announcement, but your story doesn't even make sense. We already know elevations isobsessedwithgrabbingateveryone'spasswordssohecantryuse their accounts on other servers/forums (i.e. this one) to troll/harass etc.


Yes i'm sorry about that. It was the right thing that u figured it out. Since the passwords are encrypted you could use the command to get the password. otherwise your password would be something like 9458!@$#@ that's why i used the command. I don't know anyotherwaysofdoingthisatm.Unlessaddinganewdatabase column called ''passRecovery'' that shows the unencrypted password. You guys might experience it different, but for me elevations is a very good friend. I don't blame you for hating him but i trust ele.

The goal of password recovery isn't to actually get someone's password. Noone should ever be looking at a copy of the users password, that's why password hashing is the minimal amount of required security for any user database. What the rest of theworlddoesisuseanalternativewaytoverifythe user's identity (typically, sending them an email with a recovery ID) and then letting them use that to change their password. For the cases where they've lost access to that email you can manually set their passwords still withouteverneedingtoknowtheiroriginal.

Edit: I've added a notice at the top of the announcement about 1.4

Edit 2: I can't believe I almost missed this. Cheers:

I am sure your users love you trying to decide who can and can't use their server.


Ok i must admit that ele shouldn't have done that. Ele did release  the new 1.4 where he probaly added this in. Could you check if the rev i uploaded today shows this fag thing too? And again, again my apologizes sausage. This shit isn't meant to bethereespeciallytheSausage,exilefagthing.

I lol'ed. If the backdoor was truely removed then you guys wouldn't have shit to hide via obfuscating and failed attempts to keep Sausage and myself away.

Well i wasn't even aware of the permanently banned code.

Not even going to "defend" against my statement huh? 
I wasn't the only one on the chatbox that saw ele admit he knew of the command, but then says "its a forgotten command". 

What's there to be defended? Maybe he knew of it. I might have said he didn't but i don't watch ele 24/7 either and ask him what he knows and what he doesn't know. Just as i said before it's really starting to feel like the only thing you care about is making EOSource look bad. Just because ofthissingle #user thing which IS ALREADY removed your doing all difficult. It's not just the #user anymore but starting to get EOSource down. That's how all act now.

@toolcoolforaname if you'll only act childish don't post? Here is the credits page if you like to see it.

When trying to ask ELE about anything that might make him look bad he jumps to the "ITS SAUSAGES FAULT  ALL THIS IS HAPPENING HE HAXED MY WEBSITE" defense. 

Why would you clearly state in a post he doesn't know or have anything to do with it, when on this post you say "maybe he knew" "I don't watch ele 24/7 either and ask him what he knows an what he doesn't know" yet you clearly said he didn't know.. why speak for him if your just going to turn around an retract it? 
---
http://www.ctronic.ga
http://www.tsu.co/Deltro
https://www.reverbnation.com/deltro9
12 years, 51 weeks ago
Post #121795 Re: Warning: Do not use EOSource or Seose
Hollow posted: (9th Jan 2012, 06:14 pm)

Apollo posted: (9th Jan 2012, 06:13 pm)

Clive says he has never seen the code. That's really odd.


Lol ask him again, He had my source several times.

now i feel like replying, i actually never did have the EOsource source you can look in my pc. newest source i have from you is ice & fire 4.0 which doesn't include any backdoors in it. later on i've only helped you FIXING bugs and giving you support by codes. might would like to change that lol.
---
opensource isometric game engine ~ www.avac-engine.blogspot.com
12 years, 51 weeks ago
Page: << 1 2 ... 7 8 9 10 11 ... 14 15 >>
Topic is locked.
EOSERV Forum > Announcements > EO Server Backdoor Warnings